Cybersecurity Network Engineer (f/m/x)

We are looking for a Senior Cybersecurity Engineer to join our Network Security Product team, where you will act as the primary Subject Matter Expert for Secure Access Network Services. In this role, you will lead the evolution of Network Access Control, identity-driven security, segmentation, and authentication services across global enterprise. Your mission will be to ensure that network remains resilient and compliant through the continuous evolution of our 'Defense in Depth' strategy.

• Minimum 5 years of experience in cybersecurity engineering with a focus on network security
• Deep expertise in Cisco technologies, particularly Cisco ISE, including hands-on experience with TrustSec and Dot1x
• Proven experience deploying and maintaining Palo Alto Next-Generation Firewalls, including SSL decryption and threat prevention
• Strong command of Infrastructure as Code (IaC) principles, with proficiency in Terraform and GitHub
• Practical experience in using Python for automation and managing network security infrastructure at scale
• Solid understanding of enterprise networking, including advanced knowledge of routing protocols and switching
• Advanced level of English and Polish

Nice-to-have requirements

• Experience in regulated industries such as Pharmaceuticals, Healthcare, or Finance
• Familiarity with CI/CD pipelines and automated workflows for security operations

We are looking for a Senior Cybersecurity Engineer to join our Network Security Product team, where you will act as the primary Subject Matter Expert for Secure Access Network Services. In this role, you will lead the evolution of Network Access Control, identity-driven security, segmentation, and authentication services across global enterprise. Your mission will be to ensure that network remains resilient and compliant through the continuous evolution of our 'Defense in Depth' strategy.

,[Driving the long-term technical roadmap for network access, ensuring alignment with Roche's Zero Trust security architecture and strategy, Partnering with business units to translate high-level security requirements into actionable, scalable technical initiatives and functional policies, Providing mentorship and technical leadership to junior engineers, fostering a culture of continuous learning and operational excellence within the team, Designing, deploying, and maintaining robust authentication solutions utilizing protocols such as 802.1X, EAP-TLS, RADIUS, and MFA, Integrating disparate security platforms with enterprise Identity Providers to ensure seamless and secure authentication flows, Leading the lifecycle management of Cisco ISE deployments, including software upgrades and platform optimization, Developing and maintaining observability, monitoring, and reporting dashboards to track platform health and security compliance, Advocating for and implementing Infrastructure-as-Code principles to improve deployment speed and consistency] Requirements: Cisco, IaC (Infrastructure as Code), Python, Palo Alto Networks, Cisco ISE, Terraform, GitHub, CI/CD, Enterprise Networking Additionally: Medical care, Insurance, Sport cards, Language courses, Refferal programs, Welcome packs and other occasional gifts, Passion Sponsorship program, Regular integration events and trips, Contracts with the biggest brands, Diverse portfolio of clients, Flexible forms of employment, Internal training center, Mentoring program, Buddy Program & efficient onboarding process, Technology communities, Jubilee rewards, Profit sharing, Sport & hobby communities, Breakfast, drinks and fresh fruits in the office, Wide portfolio of technologies, Solid financial situation, Comfortable and well-equipped offices, MySii app, Invoice kiosk.